The short version
- We ask for read-only Gmail access and only look at emails from Amazon.
- We pull out order details, then discard the email. We never store email content.
- We don't sell your data, show you ads, or use your data to train AI models.
- You can export or permanently delete your data at any time.
Who we are
TrueSpend is operated by BrewingStack Technologies Inc. (“BrewingStack”, “we”, “us”), a company based in Ontario, Canada. We are responsible for the personal information described in this policy. It applies to truespend.io and the TrueSpend web app (together, the “Service”).
What we collect
| Information | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, sign-in method | You, when you sign up |
| Amazon order data | Order number and date, item names, quantities, list prices, order totals, refunds, seller | Amazon emails in your connected Gmail account |
| Your edits | Categories, essential/discretionary choices, manually added transactions | You, inside the app |
| Billing details | Plan, billing history, card brand and last four digits | Stripe, our payment processor |
| Usage and device data | Pages visited, features used, browser type, IP address, error logs | Automatically, when you use the Service |
| Messages to us | Support emails, feedback and survey answers | You |
We do not collect your Google password, your bank or card credentials, or any email that isn't from Amazon.
How we use data from your Gmail account
When you connect Gmail, you grant TrueSpend the gmail.readonly permission. We use it in a narrow way:
- We access only messages sent by Amazon about your orders and refunds.
- We keep the order details from those messages and never store the messages themselves.
- We cannot send, delete, label or modify any email.
- No person at TrueSpend reads your emails, except when you ask us to for support, when needed for security, or when required by law.
Specifically, we use Gmail data only to provide and improve the spending features you see in TrueSpend. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine-learning models. You can revoke access at any time from your Google account permissions.
How we use information
- To run the Service: importing your orders, showing what you paid per item, categorizing purchases, and building your reports and exports.
- To categorize items: we share item names and prices, without your name or email address, with an AI service provider that suggests a category. The provider may not use this data to train its models.
- To bill you: managing your trial, subscription and receipts.
- To support you: answering questions and fixing problems you report.
- To keep the Service secure: preventing fraud and abuse and investigating errors.
- To communicate: sending account and billing notices. Product updates are optional, and you can unsubscribe at any time.
We use aggregated, de-identified statistics (for example, how many people use exports) to improve TrueSpend. These cannot be linked back to you.
How long we keep it
- Email content: never stored.
- Transactions and account data: kept while your account is open.
- After you delete your account: permanently deleted within 30 days, including Gmail access tokens. Backups are overwritten within a further 30 days.
- Billing records: kept as long as tax and accounting law requires.
Security
Data is encrypted in transit (TLS) and at rest. Gmail access credentials are stored encrypted, and access to production systems is limited to authorized team members and protected by multi-factor authentication. No system is perfectly secure, but if a breach affects your information, we will notify you and the relevant authorities as the law requires.
Your rights and choices
Wherever you live, you can:
- Access and export your data from Settings, or ask us for a copy.
- Correct any transaction or account detail.
- Delete your account and all associated data.
- Withdraw consent by disconnecting Gmail, which stops all future imports.
- Opt out of optional emails.
Depending on where you live, laws such as Canada's PIPEDA, the GDPR or the California Consumer Privacy Act may give you additional rights. To use any of these rights, email privacy@truespend.io. We'll respond within 30 days. If you're in Canada and unhappy with our response, you can contact the Office of the Privacy Commissioner of Canada.
Where your data is stored
Our service providers may store and process data in Canada, the United States and other countries. Those countries may have different data-protection laws, and your data may be accessible to their authorities. We use providers that apply safeguards consistent with this policy.
Children
TrueSpend is not intended for anyone under 18, and we don't knowingly collect information from children. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we make material changes, we'll email you and show a notice in the app at least 14 days before they take effect. The date at the top of this page shows when it was last updated.
Contact us
Questions about privacy? Email privacy@truespend.io or write to BrewingStack Technologies Inc., Toronto, Ontario, Canada.